Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254881	4	警告	サイバートラスト株式会社 MIT Kerberos ターボリナックスレッドハット	-	MIT Kerberos の kadmind におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0629	2010-06-16 16:17	2010-04-6	Show	GitHub Exploit DB Packet Storm

254882	6.4	警告	OpenSSL Project	-	OpenSSL の EVP_PKEY_verify_recover 関数における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1633	2010-06-15 18:26	2010-06-1	Show	GitHub Exploit DB Packet Storm

254883	3.6	注意	レッドハット	-	RHEL の yum-rhn-plugin における Red Hat Network プロファイルを閲覧される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1439	2010-06-15 18:25	2010-06-1	Show	GitHub Exploit DB Packet Storm

254884	9.3	危険	アドビシステムズ	-	Adobe Photoshop CS4 におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1296	2010-06-15 18:25	2010-05-26	Show	GitHub Exploit DB Packet Storm

254885	5	警告	日立	-	Groupmax World Wide Web Desktop におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2010-06-14 16:24	2010-05-26	Show	GitHub Exploit DB Packet Storm

254886	4.3	警告	日立	-	Hitachi Web Server の SSL クライアント認証における CRL 失効確認不可の脆弱性	CWE-287 不適切な認証	-	2010-06-14 16:24	2010-05-17	Show	GitHub Exploit DB Packet Storm

254887	5	警告	日立	-	TP1/Message Control におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	-	2010-06-14 16:23	2010-05-17	Show	GitHub Exploit DB Packet Storm

254888	10	危険	日立 CA Technologies	-	CA XOsoft におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1223	2010-06-14 16:23	2010-04-6	Show	GitHub Exploit DB Packet Storm

254889	5	警告	日立 CA Technologies	-	CA XOsoft における重要な情報を取得される脆弱性	CWE-287 不適切な認証	CVE-2010-1222	2010-06-14 16:23	2010-04-6	Show	GitHub Exploit DB Packet Storm

254890	5	警告	日立 CA Technologies	-	CA XOsoft におけるユーザ名を列挙される脆弱性	CWE-287 不適切な認証	CVE-2010-1221	2010-06-14 16:23	2010-04-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265931	5.4	MEDIUM Network	ibm	tririga_application_platform	Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web s…	CWE-79 Cross-site Scripting	CVE-2016-2883	2024-11-21 11:49	2016-07-2	Show	GitHub Exploit DB Packet Storm

265932	4.3	MEDIUM Network	ibm	tririga_application_platform	IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses.	CWE-200 Information Exposure	CVE-2016-2882	2024-11-21 11:49	2016-07-2	Show	GitHub Exploit DB Packet Storm

265933	6.5	MEDIUM Network	bzip python	bzip2 python	Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the…	NVD-CWE-Other	CVE-2016-3189	2024-11-21 11:49	2016-07-1	Show	GitHub Exploit DB Packet Storm

265934	8.8	HIGH Network	ibm	websphere_portal web_content_manager	Cross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Content Manager allows remote attackers to hijack the authent…	CWE-352 Origin Validation Error	CVE-2016-2901	2024-11-21 11:49	2016-06-26	Show	GitHub Exploit DB Packet Storm

265935	8.8	HIGH Network	libav ffmpeg debian opensuse	libav ffmpeg debian_linux leap	The mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via the …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3062	2024-11-21 11:49	2016-06-17	Show	GitHub Exploit DB Packet Storm

265936	7.3	HIGH Local	microsoft	office_compatibility_pack excel	Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vul…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3233	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

265937	5.0	MEDIUM Local	microsoft	windows_server_2012	The Virtual PCI (VPCI) virtual service provider in Microsoft Windows Server 2012 Gold and R2 allows local users to obtain sensitive information from uninitialized memory locations via a crafted appli…	CWE-200 Information Exposure	CVE-2016-3232	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

265938	7.8	HIGH Local	microsoft	windows_diagnostics_hub	The Standard Collector service in Windows Diagnostics Hub mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of …	CWE-19 Data Processing Errors	CVE-2016-3231	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

265939	5.0	MEDIUM Local	microsoft	windows_rt_8.1 windows_server_2012 windows_10 windows_8.1 windows_7 windows_server_2008	The Search component in Microsoft Windows 7, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to cause a denia…	CWE-20 Improper Input Validation	CVE-2016-3230	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

265940	8.8	HIGH Network	microsoft	windows_server_2012 windows_server_2008	Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows Server 2012 Gold and R2 allow remote authenticated users to execute arbitrary code via a crafted NetLogon request, aka "Windows Netlogon Memor…	CWE-20 Improper Input Validation	CVE-2016-3228	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed